@tim_g said in Replacing a failed CA:

@kelly said in Replacing a failed CA:

@dashrender said in Replacing a failed CA:

@kelly said in Replacing a failed CA:

@tim_g said in Replacing a failed CA:

@kelly In what way is your DC using certificates?

Domain Controller Authorization and Domain Controller.

I ended up just deleting the certs within CertMgr on the DCs themselves, and then requesting new ones. It appears to have fixed the problem.

I was wondering if it would simply be that simple.

I was leery of doing it at first since I didn't know what all was tied to those certs. In the end I just decided to go for it.

You could always export the cert first before deleting it. That way you can always put it back.

Too late for that... cough
0_1510771545875_quote-damn-the-torpedoes-full-speed-ahead-david-g-farragut-342437.jpg

@fateknollogee said in What is KVM Best Management Tools in 2017?:

scale

Sys Admins don't use Scale. Its' a platform. Platform admins use it. Bit different.

@tim_g said in Storage for On-site Backups:

Otherwise, unless you can get a direct 1gb or 10gb network connection, backup times will suck.

Just an FYI, this also may completely depend on your backup software too.

But if using a software backup appliance such as unitrends on a VM, you'd want to have the storage local to the Unitrends VM for example.

@joel said in Google Apps for Business - Drive Permissions:

HI all.
I was wondering if there is a way I can establish which users have permissions on each folder within a Google Drive business platform?

We've just started working with a company who have 50users on Google Apps (half of which are old users) and our first plan is to tidy it up and figure out permissions on each folder.

Does anyone have any tools/apps/advice on how I generate a good report/account on what files/folders are shared to which users? It would be good to present this in CSV format.

Thanks

Take a look at this:
https://support.google.com/a/answer/4579696?hl=en
https://gsuite.google.com/marketplace/app/drive_permissions_auditor/370134017754

@muzzo said in Starting in the VoIP world:

@hobbit666 said in Starting in the VoIP world:

@JaredBusch said in Starting in the VoIP world:

You need one SIP trunk and in your PBX config, you tell it 3 max calls allowed.

So if I just bought a trunk form someone like this:-
https://www.800comms.co.uk/
That's £35 for the year I could have several calls on this at once? Or do I need to find a SIP provider that will give me a trunk with lots of capacity to speak?

Thanks for the link, i checked and i assume the cost is not to high, but i follow up the next company and buy sip trunk services from them.

There is Twilio and a Telnyx in the U.K. As well,

@dbeato said in How to change you Server 2016 Evaluation into a Standard License:

@jaredbusch said in How to change you Server 2016 Evaluation into a Standard License:

I have had to do this a couple times and always need to look up the command.

So I thought I would drop it here so I can search here first in the future.

DISM /online /Set-Edition:ServerStandard /AcceptEula /ProductKey:XXXXX-XXXXX-XXXXX-XXXXX-XXXXX

0_1510698622929_63007167-819c-4838-a470-1ec4889d4844-image.png

Technet Article for doing this on Server 2012: https://technet.microsoft.com/en-us/library/jj574204.aspx

Great job on the powershell, others usually do the command prompt.

Right click on Start open Powershell. I use that only because it is default. The command works in both. I have no preference for something like this command.

We have had multiple versions of Office affected by this on multiple computers.

So when I first install XenServer and I "tick" thin provisioning, behind the scene it's making the drive ext, so I assume if I didn't choose thin provisioning it would have made it LVM?

@romo said in Anyone have a script to rip apart traceroute:

@reid-cooper said in Anyone have a script to rip apart traceroute:

SmokePing

@JaredBusch maybe try using Scapy to get what you want? It can do plotting and graphing and many other things, just have to read through the documentation.

Ex: A simple traceroute to mangolassit from my work computer with a graph.

>>> res, unans = traceroute("mangolassi.it",dport=443,maxttl=20) Begin emission: ****Finished to send 20 packets. **************** Received 20 packets, got 20 answers, remaining 0 packets 104.25.46.32:tcp443 1 189.211.38.162 11 2 200.78.150.113 11 3 200.78.150.49 11 4 148.240.205.13 11 5 213.248.97.166 11 6 213.248.97.166 11 7 62.115.32.214 11 8 104.25.46.32 SA 9 104.25.46.32 SA 10 104.25.46.32 SA 11 104.25.46.32 SA 12 104.25.46.32 SA 13 104.25.46.32 SA 14 104.25.46.32 SA 15 104.25.46.32 SA 16 104.25.46.32 SA 17 104.25.46.32 SA 18 104.25.46.32 SA 19 104.25.46.32 SA 20 104.25.46.32 SA >>> res.graph()

That looks solid.

no other idea with superfecta ?

@nerdydad said in Password Managers:

I finally took the plunge and put my stuff on BitWarden.

LP was too persistent about wanting to autofill for me and ALWAYS closing sessions, forcing me to login more than I would have liked.

Yeah DL liked to crash occasionally too. The Windows app was especially prone to crashing. There were several times where I had to do full reboots to be able to use DL again.

Bitwarden has yet to crash on me.

@scottalanmiller said in Home Network Setup:

@jmoore said in Home Network Setup:

@scottalanmiller said in Home Network Setup:

@dashrender said in Home Network Setup:

The whole crux of my ask was - the desire to buy as few Windows Server CALs as possible.

This is unrelated to the question asked, though.

you know i have noticed you and dash really communicate differently. not good or bad, just different. then you both have trouble understanding the other. from the many threads i have read with you two, that is the common theme i have seen.

I'd assume part of it is that I am highly literal. That tends to be a root of many communications issues for me in general.

yeah i think your right you are literal. i had to adjust my communication with you. that was my fault though, i am used to having to be so unliteral with my users because i would lose them that i got into that bad habit lol. i know for me, i was not explaining my thoughts in a well laid out way and that made me harder to understand and threw you off. did i do better that time?

@scottalanmiller said in Chromebooks and Mild Paranoia:

@r3dpand4 said in Chromebooks and Mild Paranoia:

@scottalanmiller I'm a little suspicious as to whether this was actually obtained by legal means, but seems like a really good deal https://dallas.craigslist.org/ndf/sys/d/asus-zenbook-ux305c/6376827888.html

ZenBooks are pretty sweet.

Speak for yourself. The one we had was crap. 13 month and dead.

I managed to fix it. I'm not entirely sure what the fix was because I made too many changes at once.

I think it was an issue where SELinux suddenly didn't like Network Manager touching that file for some reason. No idea why that would suddenly be an issue.

Anyways, the four main changes I did:

First

# Cleared the contents of: /etc/resolv.conf

Second

ausearch -c 'dnsmasq' --raw | audit2allow -M my-dnsmasq semodule -X 300 -i my-dnsmasq.pp

Third

ausearch -c 'NetworkManager' --raw | audit2allow -M my-NetworkManager semodule -X 300 -i my-NetworkManager.pp

Fourth
reboot now

Billing Admin can only manage bills, password admin can only reset regular users accounts.

https://support.office.com/en-us/article/About-Office-365-admin-roles-da585eea-f576-4f55-a1e0-87090b6aaa9d

@scottalanmiller Perfect. Thank you.

@dashrender said in Managing Hyper-V:

@scottalanmiller said in Managing Hyper-V:

@dashrender said in Managing Hyper-V:

The fuss I'm kicking is simply the fact that you have two machines. Nothing more, nothing less.

Which two, what do you mean?

He claims to have two computers - a Windows based computer from which to mange his Hyper-V host, and a Chromebook he uses for everything else - this seems like a waste - why have two computers when a single Windows machine will do it all?

Oh, I missed the dedicated machine for Windows. Just make that a VM on top of the cluster, problem solved.

@black3dynamite said in Tabs everywhere - how do you deal with many open tabs?:

In Firefox, I create my own Read Later folder and add links I want to see later in there.

this is what i do also. when i have extra time i start with the ones that have been there the longest. i add to it as i discover stuff and don't have time to read it then

@tim_g said in Installing Salt Master:

@scottalanmiller said in Installing Salt Master:

Now we can easily get Salt Master installed.
cd /tmp; curl -L https://bootstrap.saltstack.com -o install_salt.sh
sh install_salt.sh -M

What's the difference between installing it like you mention above, or via the repository apt-get install salt-master for example?

https://repo.saltstack.com/#ubuntu

Ubuntu because that's all I have available right now for testing, in case anyone has the urge to point that out. It's also the same for Fedora: https://docs.saltstack.com/en/latest/topics/installation/fedora.html
But that's besides the point.

In theory it handles grabbing the repos under the hood, but in a more universal way. And handles some distros that dont' necessarily have repos.